Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.Sep 27, 2022
- Medium5.5A flaw was found in the Linux kernel.Sep 9, 2022
- Medium5.5An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map.Sep 9, 2022
- Medium5.3An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message.Sep 1, 2022
- High7.0A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously.Aug 31, 2022
- Medium5.5A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ.Aug 31, 2022
- High8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.Aug 31, 2022
- Medium5.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component.Aug 29, 2022
- Medium5.5A flaw was found in the Linux kernel.Aug 26, 2022
- High7.8A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function ni…Aug 24, 2022
- Medium5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.Aug 24, 2022
- Medium4.4A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with…Aug 24, 2022
- High7.8A flaw was found in glibc.Aug 24, 2022
- Medium5.5A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, c…Aug 23, 2022
- High8.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 9.9%Aug 18, 2022
- High7.5A vulnerability found in gnutls.Aug 1, 2022
- High7.5In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.Jul 20, 2022
- Medium6.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.Jul 18, 2022
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.Jul 5, 2022
- Medium5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat…Jun 30, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Jun 21, 2022
- Medium5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclos…Jun 15, 2022
- Medium5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Jun 15, 2022
- Medium5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Jun 15, 2022
- Medium6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.Jun 2, 2022